Full AWS Security Course

Level up your AWS skills with AWS IAM Identity Center, enabling central access management across accounts, multifactor authentication, identity provider integration, and permission sets.

Discover how AWS IAM Roles Anywhere enables on-premises servers to assume roles, using private certificate authority, certificate manager, and trust anchors to securely access AWS resources such as S3.

Learn to implement AWS IAM roles anywhere by building a trust anchor with OpenSSL and generating client keys and CSRs for temporary credentials.

Explore how AWS IAM Access Analyzer detects external access, unused access, and generates policies from CloudTrail, helping you revoke external access, clean up unused permissions, and tailor policies.

Attach resource control policies to accounts or units in AWS Organizations to block external principals; governance via service control policies and AWS Control Tower preventive controls enforce denial across accounts.

Learn how to detect and analyze attacks in AWS with Amazon GuardDuty, integrating CloudFront, WAF, application load balancer, EC2, S3, and EBS malware protection, plus runtime monitoring and log telemetry.

Learn how AWS GuardDuty runtime monitoring detects threats in your EC2 environment, identifies reverse shells and suspicious commands, and leverages VPC, CloudFront, WAF, and ALB components to protect workloads.

Learn how Amazon GuardDuty malware protection for S3 automatically scans every uploaded object, tags threats, and extends to multiple buckets via event-driven IAM roles and easy configuration.

Learn how misconfigurations and overly permissive IAM roles enable privilege escalation in AWS EC2, using Pakku to harvest instance metadata credentials and elevate from EC2 role to admin.

Use AWS Security Hub to consolidate findings and measure compliance against CIS, PCI DSS, and AWS Foundational Security Best Practices, gaining a single security posture view across accounts.

Automate security findings across multi-region AWS environments with Security Hub, EventBridge, Lambda, and Step Functions, then remediate and harden resources via CloudFormation templates and playbooks.

Explore how AWS Security Hub correlates GuardDuty, Inspector, and Macie to reveal exposure findings and attack paths, enabling prioritized remediation of misconfigurations and excessive permissions.

Learn to deploy AWS WAF and protect websites from bad bots and common web exploits by configuring web access control lists, managed rules, and CloudWatch monitoring.

Protect login pages from credential stuffing using AWS WAF's account takeover prevention by configuring the web ACL to target the username and password fields.

Explore how AWS WAF bot control blocks bad bots, mitigates DDoS and web exploits, and uses Captcha and JavaScript challenges to verify legitimate users.

Implement AWS WAF captcha on the WordPress login path with a login checker rule to protect the application load balancer and related resources using a 300-second captcha token.

Explore the brand-new AWS WAF console, configure protection packs for WordPress on EC2, review live traffic and log exploration, and apply smart recommendations with rate limits and bot control.

Explore how AWS Control Tower orchestrates multi-account governance with a landing zone, AWS organization units, log archive and audit accounts, and guardrails.

Explore how infrastructure as code enables scalable multi-account deployments in AWS, and how AWS Control Tower proactively blocks high-risk ports like 22 and 3389 via CloudFormation safeguards.

Explore how AWS Control Tower enables multi-account governance by provisioning CloudFormation templates through the Service Catalog, using blueprint product IDs and versions to push infrastructure as code to target accounts.

Learn how Amazon Security Lake uses the Open Cybersecurity Schema Framework to ingest diverse logs into S3, enabling Athena queries and OpenSearch visualizations for threat detection.

Learn how AWS Secrets Manager protects database credentials by securely storing and rotating secrets, enabling a Lambda function in a VPC to access RDS without exposing credentials through code.

Explore Amazon inspector code security for code repository scanning with GitHub, detecting vulnerabilities like SQL injection and command injection, and reviewing findings with location details and remediation suggestions.

Master Amazon Inspector for vulnerability management at scale across Lambda, EC2, and ECR. Use Amazon Inspector score and vulnerability intelligence to identify and remediate critical findings in code and images.

Learn how Scattered Spider uses phishing to steal AWS IT administrator credentials, gain access to AWS accounts, and perform post-exploitation including credential harvesting and S3 ransomware scenarios.